boxscore/security

A daily page of record for published software vulnerabilities — the previous UTC day, closed and final. New here?

Sunday, June 28, 2026 · all times UTC← 2026-06-27 · archive · 2026-06-29 →

44 CVEs published, led by SourceCodester (4).

44 CVEs published June 28, 2026: 1 critical, 8 high, 12 medium, 23 low; 0 in the KEV catalog at press time; 6 with a public exploit reference; 0 awaiting enrichment. 25 rendered as box scores below; the remaining 19 in the results table.

Standings

League
MTDYTD2025 same span2025 full
CVEs published70731151011792564
KEV catalog size1671

512 disclosures carry no usable vendor attribution (upstream records marked n/a or unknown) and are excluded from the vendor tables. C/H/M/L = YTD disclosures by severity band. KEV = catalog entries all-time / YTD. KEV/100 = KEV additions YTD ÷ CVEs YTD × 100. Med CVSS / Med EPSS = medians over the vendor's YTD disclosures. Δ = this month-to-date minus the same day-span of last month.

Operating Systems & Platforms
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
linux513148111985450312730.27.8.0013-127 ▼
google70788185464300297460.78.1.0023+539 ▲
microsoft220765585201726380273.57.8.0046+50 ▲
red hat108172973828400.06.8.0026+73 ▲
apple156201637294711.35.5.0023-5 ▼
canonical6202585000.05.5.0011-8 ▼
freebsd91601240000.07.8.0015+2 ▲
suse461410000.08.6.0029+2 ▲
Network & Infrastructure
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
cisco10234480961147.87.0.0431+5 ▲
netgear171700161800.04.3.0024+17 ▲
palo alto networks911017114218.24.8.0022+8 ▲
ubiquiti81174004327.39.9.0083+6 ▲
f56943107111.18.9.0221+4 ▲
ivanti49230033555.68.8.5187+2 ▲
checkpoint3915303111.17.5.0410-3 ▼
fortinet28132028337.57.3.0066+1 ▲
Open Source Ecosystems
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
apache104136224756104010.77.0.0044+83 ▲
mozilla495511182601300.07.3.0026+43 ▲
gitlab243305215426.14.4.0022+17 ▲
docker470520100.08.2.0016+1 ▲
drupal0511305120.05.1.0026-5 ▼
github131110000.07.0.0039-1 ▼
jenkins00000060———0
joomla00000010———0
Enterprise Applications
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
oracle2432701311161844020.78.8.0040+218 ▲
adobe1321364507727532.25.5.0021+131 ▲
ibm32811935270700.07.5.0028-17 ▼
progress591710900.07.5.0036+1 ▲
solarwinds36121011466.77.5.3995+3 ▲
veeam142200400.09.0.0046-2 ▼
zohocorp131110000.08.4.0170-1 ▼
atlassian000000130———0
Industrial & Embedded
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
synology52325133000.05.6.0025-13 ▼
d-link91204252618.35.5.0058+7 ▲
siemens780440100.07.5.0020+6 ▲
rockwell automation771510000.08.7.0030+7 ▲
abb660420000.07.2.0018+6 ▲
schneider electric660420100.07.8.0024+6 ▲
moxa550320000.07.0.0029+5 ▲
dahua330111200.06.9.0036+3 ▲
Other
VendorMTDYTDCHMLKEVKEV YTDKEV/100Med CVSSMed EPSSΔ
spring7273231391000.06.5.0024+71 ▲
openclaw61670352210000.07.0.0021+61 ▲
sourcecodester4163002934000.02.1.0026+21 ▲
themerex585855300000.08.1.0043+58 ▲
dell3856130240211.87.2.0016+26 ▲
edimax556033023100.07.4.0070-39 ▼
jenkins project364909391000.04.8.0021+23 ▲
capgo4646222211000.07.0.0034+46 ▲

Leaders (trailing 30 days unless noted)

Highest EPSS
CVEEPSS%ileCVSS
CVE-2026-10520.9990100.010.0
CVE-2026-20253.969499.99.8
CVE-2026-35273.954799.99.8
CVE-2026-34910.869699.710.0
CVE-2026-34908.851999.710.0
CVE-2026-20230.832199.78.6
CVE-2026-42271.830199.6—
CVE-2026-50751.825599.69.3
CVE-2026-48907.688399.310.0
CVE-2026-34909.639099.210.0
Highest CVSS
CVECVSSEPSSNote
CVE-2026-1052010.0.9990KEV
CVE-2026-3491010.0.8696KEV
CVE-2026-3490810.0.8519KEV
CVE-2026-4890710.0.6883KEV
CVE-2026-3490910.0.6390KEV
CVE-2026-5357610.0.0219
CVE-2026-5375310.0.0209
CVE-2026-4977710.0.0166
CVE-2026-1142910.0.0115
CVE-2026-4925710.0.0093
Most disclosures (vendor)
VendorCVEs
google707
linux514
oracle243
microsoft220
adobe132
red hat108
apache104
spring72
openclaw61
themerex58
Most KEV additions (YTD)
VendorKEV
microsoft27
cisco11
apple7
google6
ivanti5
solarwinds4
synacor4
adobe3
fortinet3
linux3
Most-affected ecosystems
EcosystemAdvisories
Maven39
Packagist15
PyPI9
npm5
Fastest to KEV
CVEVendorDays
CVE-2022-0492Linux0
CVE-2024-21182Oracle0
CVE-2025-48595Google0
CVE-2025-67038Lantronix0
CVE-2026-10520ivanti0
CVE-2026-11645Google0
CVE-2026-12569PTC0
CVE-2026-20230Cisco0
CVE-2026-20245Cisco0
CVE-2026-20253Splunk0
Longest unpatched (KEV due date passed)
CVEVendorDueDays over
CVE-2021-27104Accellion2021-11-171684
CVE-2021-27102Accellion2021-11-171684
CVE-2021-27101Accellion2021-11-171684
CVE-2021-27103Accellion2021-11-171684
CVE-2021-21017Adobe2021-11-171684
CVE-2021-28550Adobe2021-11-171684
CVE-2021-42013Apache2021-11-171684
CVE-2021-41773Apache2021-11-171684
CVE-2021-30858Apple2021-11-171684
CVE-2021-30860Apple2021-11-171684

Transactions

EXPLOIT PUBLISHED — zephyrproject zephyr: 3 CVEs (CVE-2026-10593, CVE-2026-10644, CVE-2026-10646). Public exploit references added.

Yesterday's Results

How to read these box scores · glossary

44 CVEs published. 25 box scores, 19 table rows — nothing truncated.

CVE-2026-58057LOW
Flowise - Custom MCP Environment Variable Denylist Bypass via Case Sensitivity
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   P   L   N   L   L   L    2.3   .0127   67.5     —
AFFECTED
  Product  Versions     Fixed
  Flowise  unspecified  3.1.3
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-178 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed
CVE-2026-58058MEDIUM
Nmap - Integer Underflow in IPv6 Extension Header Parsing
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   L    6.9   .0088   56.3     —
AFFECTED
  Product  Versions     Fixed
  Nmap     unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-191 · CNA: VulnCheck · CVSS v4.0 · 4 references · NVD status: Analyzed
CVE-2026-58050HIGH
libssh2 - Integer Overflow in publickey Subsystem Attribute Allocation
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   L   H    8.3   .0071   50.6     —
AFFECTED
  Product  Versions     Fixed
  libssh2  unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-190 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed
CVE-2026-13501LOW
antlr ANTLR4 gofmt GoTarget.java GoTarget command injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   L   L   N   L   N   L   L   L    1.9   .0068   49.6     —
AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-77 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred
CVE-2026-13503MEDIUM
antlr ANTLR4 tokenVocab Grammar Option TokenVocabParser.java getImportedVocabFile path traversal
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   N   N    5.5   .0055   43.7     —
AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-22 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred
CVE-2026-49048HIGH
joomcoder.com JoomCCK extension for Joomla — Joomla Extension - joomcoder.com - Unauthenticated SQL Injection in JoomCCK extension for Joomla < 6.4.1
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   N   N    8.7   .0050   41.1     —
AFFECTED
  Product                       Versions     Fixed
  JoomCCK extension for Joomla  1.0-6.4.0 –  —
TIMELINE
  May 27  Reserved by CNA
  Jun 28  Published (CNA: Joomla)
CWE-89 · CNA: Joomla · CVSS v4.0 · 1 reference · NVD status: Analyzed
CVE-2026-13515HIGH
Tenda JD12L SetPptpServerCfg formSetPPTPServer stack-based overflow
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0048   39.3     —
AFFECTED
  Product  Versions       Fixed
  JD12L    16.03.53.23 –  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-119, CWE-121 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-13516HIGH
Tenda JD12L WifiGuestSet fromSetWifiGusetBasic stack-based overflow
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    7.4   .0047   38.6     —
AFFECTED
  Product  Versions       Fixed
  JD12L    16.03.53.23 –  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-119, CWE-121 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-58051HIGH
libssh2 - Free of Uninitialized Pointer in publickey List Cleanup
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   N   L   H    8.3   .0044   36.8     —
AFFECTED
  Product  Versions     Fixed
  libssh2  unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-908 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed
CVE-2026-13491LOW
78 xiaozhi-esp32 MQTT Goodbye mqtt_protocol.cc GetInstance denial of service
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   N   N   L    2.9   .0041   34.5     —
AFFECTED
  Product        Versions  Fixed
  xiaozhi-esp32  2.2.0 –   —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-404 · CNA: VulDB · CVSS v4.0 · 8 references · NVD status: Deferred
CVE-2026-10646HIGH
zephyrproject zephyr — Use-after-return in `zsock_getaddrinfo()` when a timed-out DNS query is retried without cancellation
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   N   H   N   N  U  N  H  H    7.4   .0032   24.9     —
AFFECTED
  Product  Versions  Fixed
  zephyr   3.7.0 –   —
TIMELINE
  Jun 2   Reserved by CNA
  Jun 28  Public exploit reference published
  Jun 28  Published (CNA: zephyr)
CWE-416 · CNA: zephyr · CVSS v3.1 · 2 references · NVD status: Modified
CVE-2026-13500MEDIUM
antlr ANTLR4 Grammar Action Block OutputFile.java code injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0031   23.9     —
AFFECTED
  Product  Versions  Fixed
  ANTLR4   4.13.0 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-94 · CNA: VulDB · CVSS v4.0 · 5 references · NVD status: Deferred
CVE-2026-13490MEDIUM
glpi-project glpi Document document.send.php canViewFile authorization
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   N   N    6.3   .0031   23.6     —
AFFECTED
  Product  Versions  Fixed
  glpi     11.0.5 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-285, CWE-639 · CNA: VulDB · CVSS v4.0 · 4 references · NVD status: Deferred
CVE-2026-13484LOW
n/a MLflow — MLflow Experiment-scoped Label Schema CRUD API authorization
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   L   N   L   L   L    1.3   .0031   23.3     —
AFFECTED
  Product  Versions                                    Fixed
  MLflow   4666cffc7912ea606d592fc38d6a75e2935f65e7 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-862, CWE-863 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Analyzed
CVE-2026-13509LOW
n/a RAGapp — RAGapp Knowledge File files.py FileHandler.remove_file path traversal
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   L   L   L    2.1   .0029   22.0     —
AFFECTED
  Product  Versions  Fixed
  RAGapp   0.1.0 –   —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-22 · CNA: VulDB · CVSS v4.0 · 7 references · NVD status: Deferred
CVE-2026-10593MEDIUM
zephyrproject zephyr — Remotely triggerable NULL-pointer dereference in Bluetooth LE Audio BAP unicast client QoS-state handling
  AV  AC  PR  UI  S  C  I  A   CVSS    EPSS   %ile   KEV
   A   L   N   N  U  N  N  H    6.5   .0028   20.8     —
AFFECTED
  Product  Versions  Fixed
  zephyr   4.3.0 –   —
TIMELINE
  Jun 1   Reserved by CNA
  Jun 28  Public exploit reference published
  Jun 28  Published (CNA: zephyr)
CWE-476 · CNA: zephyr · CVSS v3.1 · 2 references · NVD status: Modified
CVE-2026-13499LOW
yashpokharna2555 restaurent-management-system Registration login_register.php cross site scripting
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   P   N   L   N    2.1   .0028   20.4     —
AFFECTED
  Product                       Versions                                    Fixed
  restaurent-management-system  5f3eca87cb681366866a78038af17891c4c86612 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-79, CWE-94 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-58049HIGH
FFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   H    8.8   .0027   20.0     —
AFFECTED
  Product  Versions     Fixed
  FFmpeg   unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-787 · CNA: VulnCheck · CVSS v4.0 · 10 references · NVD status: Awaiting Analysis
CVE-2026-13485MEDIUM
SourceCodester Class and Exam Timetabling System preview.php sql injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   19.1     —
AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-13486MEDIUM
SourceCodester Class and Exam Timetabling System preview6.php sql injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   19.1     —
AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-13487MEDIUM
SourceCodester Class and Exam Timetabling System archive.php sql injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   19.1     —
AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-13488MEDIUM
SourceCodester Class and Exam Timetabling System preview7.php sql injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   19.1     —
AFFECTED
  Product                            Versions  Fixed
  Class and Exam Timetabling System  1.0 –     —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-13498MEDIUM
yashpokharna2555 restaurent-management-system POST Parameter forgotpassword.php sql injection
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   L   L   L    5.5   .0027   19.1     —
AFFECTED
  Product                       Versions                                    Fixed
  restaurent-management-system  5f3eca87cb681366866a78038af17891c4c86612 –  —
TIMELINE
  Jun 27  Reserved by CNA
  Jun 28  Published (CNA: VulDB)
CWE-74, CWE-89 · CNA: VulDB · CVSS v4.0 · 6 references · NVD status: Deferred
CVE-2026-58053CRITICAL
Gitea act_runner - Container Hardening Bypass via Workflow Container Options
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   L   N   H   H   H    9.4   .0027   18.6     —
AFFECTED
  Product     Versions     Fixed
  act_runner  unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-269 · CNA: VulnCheck · CVSS v4.0 · 2 references · NVD status: Deferred
CVE-2026-58055MEDIUM
nghttp2 nghttpx - HTTP Request/Response Smuggling via Upgrade Request with Content-Length
  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   H   N   N   N   L   L   N    6.3   .0026   18.3     —
AFFECTED
  Product  Versions     Fixed
  nghttp2  unspecified  —
TIMELINE
  Jun 28  Reserved by CNA
  Jun 28  Published (CNA: VulnCheck)
CWE-444 · CNA: VulnCheck · CVSS v4.0 · 3 references · NVD status: Analyzed
Remainder (ranked, continued)
CVECVSSEPSS %ileVendorProductCWETitle
CVE-2026-134931.314.3AIDC-AIComfyUI-CopilotCWE-99AIDC-AI ComfyUI-Copilot Workflow Checkpoint Restore conversation_api.py resou…
CVE-2026-106443.114.0zephyrprojectzephyrCWE-787Out-of-bounds write in Microchip SERCOM-G1 (PIC32CM-JH) async UART RX with 1-…
CVE-2026-134891.313.878xiaozhi-esp32CWE-66278 xiaozhi-esp32 MCP Response mcp_server.cc ParseMessage improper synchroniza…
CVE-2026-135122.112.8n/aDatabendCWE-285Databend Tenant client_session_manager.rs state_key authorization
CVE-2026-135111.312.8n/aVoltAgentCWE-266VoltAgent Memory REST API memory.handlers.ts handleGetMemoryConversation impr…
CVE-2026-135102.912.3SimStudioAIsimCWE-327SimStudioAI sim Password Protection deployment.ts weak hash
CVE-2026-134952.012.1itsourcecodeHospital Management SystemCWE-74itsourcecode Hospital Management System adminprofile.php sql injection
CVE-2026-134962.110.8itsourcecodeHospital Management SystemCWE-74itsourcecode Hospital Management System ajaxmedicine.php sql injection
CVE-2026-134972.110.8itsourcecodeHospital Management SystemCWE-74itsourcecode Hospital Management System appointment.php sql injection
CVE-2026-135042.010.6code-projectsProject Management SystemCWE-79code-projects Project Management System Mail Compose mail.php cross site scri…
CVE-2026-580567.29.2RustDeskRustDeskCWE-863RustDesk - FileTransfer Session Authorization Scope Bypass
CVE-2026-134822.98.9skypilot-orgskypilotCWE-327skypilot-org skypilot User ID server.py username.encode weak hash
CVE-2026-135082.06.2khoj-aikhojCWE-285khoj-ai khoj Conversation Sharing api_chat.py authorization
CVE-2026-135072.33.7volcengineOpenVikingCWE-345volcengine OpenViking Local VectorDB Primary-key Label str_to_uint64.py str_t…
CVE-2026-135131.33.3MyScaleMyScaleDBCWE-345MyScale MyScaleDB SegmentId.h getCacheKey data authenticity
CVE-2026-135140.93.3ChessPlay and Learn AppCWE-285Chess Play and Learn App com.chess AndroidManifest.xml backup
CVE-2026-580524.82.07-Zip7-ZipCWE-6937-Zip - Mark-of-the-Web Bypass via RAR5 Alternate Data Stream Name Collision
CVE-2026-134831.30.9arc53DocsGPTCWE-345arc53 DocsGPT Credential Storage encryption.py encrypt_credentials data authe…
CVE-2026-135021.10.6antlrANTLR4CWE-362antlr ANTLR4 Maven Plugin GrammarDependencies.java ObjectInputStream.readObje…

Methodology

Ranking. Sort: (1) KEV membership, descending. (2) EPSS score, descending. (3) CVSS base score, descending. (4) CVE ID, ascending. CVEs lacking EPSS or CVSS data sort below those that have it within their KEV tier and are labeled AWAITING ENRICHMENT. Missing scores are never imputed.

Standings. Vendor tables exclude records whose vendor field is a placeholder (n/a, unknown); the excluded count is stated under the standings. Rate stats are arithmetic over published figures: KEV/100 = KEV additions YTD ÷ CVEs YTD × 100; Med CVSS and Med EPSS are medians over the vendor's year-to-date disclosures.

Day boundary. A day is a UTC calendar day. This page covers 2026-06-28 00:00:00–23:59:59 UTC. All times shown are UTC.

Feed status for this edition. cvelist: ok · kev: ok · epss: ok · nvd: ok.

Sources. CVE records from the CVE Program (cvelistV5). Enrichment from the National Vulnerability Database (NIST). Known-exploited status from the CISA KEV catalog. Exploit probability from FIRST EPSS. Open-source advisories from OSV.dev. This page reports the public record; it does not analyze, rank by opinion, or editorialize. See full methodology.

Machine-readable. This edition as JSON or CSV — the ranked results, transactions, and counts, for citation or ingestion.